20 Commits

Author	SHA1	Message	Date
Asger F	64d39da5f8	JS: Accept Sources/Sink tags	2025-02-28 13:29:30 +01:00
Asger F	9be041e27d	JS: Update OK-style comments to $-style	2025-02-28 13:27:28 +01:00
erik-krogh	2bba9057a0	better callgraph support for global variables	2023-03-22 13:49:33 +01:00
erik-krogh	a6c9af4182	add the html argument to the jQuery functions as an XSS sink	2023-03-03 11:09:53 +01:00
erik-krogh	94870b838f	add failing test	2023-03-03 11:08:33 +01:00
erik-krogh	b85bfc8ba6	add HtmlSanitizer as a sanitizer for DOMBasedXss	2023-02-13 11:57:29 +01:00
erik-krogh	c258e44772	add failing test for spurious edge through sanitizer	2023-02-13 11:49:57 +01:00
Erik Krogh Kristensen	e80ee46fe4	add model for the cash library	2022-05-09 21:01:07 +02:00
bananabr	2e2d4c6e1f	updated tests to consider document.getSelection()	2022-05-03 21:03:35 -05:00
bananabr	57ae07017f	adds the Selection API as a new DOM text source	2022-04-30 18:27:31 -05:00
Erik Krogh Kristensen	0435cee57f	add a taint-step through URL.createObjectURL for js/xss-through-dom	2022-04-06 12:18:47 +02:00
Erik Krogh Kristensen	b11d48e749	add files in the DOM as a source for js/xss-through-dom	2022-04-06 12:09:07 +02:00
Erik Krogh Kristensen	c8385a1e80	js/xss-through-dom: filter away reads of .src that end in a URL sink	2022-03-21 16:48:59 +01:00
Erik Krogh Kristensen	81742528a2	add test	2021-08-27 10:04:39 +02:00
Erik Krogh Kristensen	cc2a267b07	recognize array elements from JQuery objects as DOM values	2021-08-16 22:35:57 +02:00
Erik Krogh Kristensen	e60628d463	add global replacements using inverted char classes as a sanitizer for DOM based XSS	2021-04-28 11:29:30 +02:00
Erik Krogh Kristensen	9178f4b1c5	add support for the anser library	2021-04-27 15:57:17 +02:00
Asger Feldthaus	a03cb11257	JS: Include $().prop() source in XssThroughDom	2021-03-11 16:27:31 +00:00
Erik Krogh Kristensen	3bad75dae5	better support for forms in js/xss-through-dom	2020-12-03 16:57:41 +01:00
Asger Feldthaus	4137d3f971	JS: Split CWE-079 tests into their own folders	2020-10-16 17:32:36 +01:00