nodes | addEventListener.js:1:43:1:47 | event | | addEventListener.js:1:43:1:47 | event | | addEventListener.js:2:20:2:24 | event | | addEventListener.js:2:20:2:29 | event.data | | addEventListener.js:2:20:2:29 | event.data | | addEventListener.js:5:43:5:48 | data | | addEventListener.js:5:43:5:48 | {data} | | addEventListener.js:5:43:5:48 | {data} | | addEventListener.js:5:44:5:47 | data | | addEventListener.js:6:20:6:23 | data | | addEventListener.js:6:20:6:23 | data | | addEventListener.js:10:21:10:25 | event | | addEventListener.js:10:21:10:25 | event | | addEventListener.js:12:24:12:28 | event | | addEventListener.js:12:24:12:33 | event.data | | addEventListener.js:12:24:12:33 | event.data | | exception-xss.js:2:6:2:28 | foo | | exception-xss.js:2:12:2:28 | document.location | | exception-xss.js:2:12:2:28 | document.location | | exception-xss.js:86:17:86:19 | foo | | exception-xss.js:86:17:86:19 | foo | | jquery.js:2:7:2:40 | tainted | | jquery.js:2:17:2:33 | document.location | | jquery.js:2:17:2:33 | document.location | | jquery.js:2:17:2:40 | documen ... .search | | jquery.js:4:5:4:11 | tainted | | jquery.js:4:5:4:11 | tainted | | jquery.js:7:5:7:34 | "
" | | jquery.js:7:5:7:34 | "
" | | jquery.js:7:20:7:26 | tainted | | jquery.js:8:18:8:34 | "XSS: " + tainted | | jquery.js:8:18:8:34 | "XSS: " + tainted | | jquery.js:8:28:8:34 | tainted | | nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | | nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | | nodemailer.js:13:50:13:66 | req.query.message | | nodemailer.js:13:50:13:66 | req.query.message | | optionalSanitizer.js:2:7:2:39 | target | | optionalSanitizer.js:2:16:2:32 | document.location | | optionalSanitizer.js:2:16:2:32 | document.location | | optionalSanitizer.js:2:16:2:39 | documen ... .search | | optionalSanitizer.js:6:18:6:23 | target | | optionalSanitizer.js:6:18:6:23 | target | | optionalSanitizer.js:8:7:8:22 | tainted | | optionalSanitizer.js:8:17:8:22 | target | | optionalSanitizer.js:9:18:9:24 | tainted | | optionalSanitizer.js:9:18:9:24 | tainted | | optionalSanitizer.js:15:9:15:14 | target | | optionalSanitizer.js:16:18:16:18 | x | | optionalSanitizer.js:17:20:17:20 | x | | optionalSanitizer.js:17:20:17:20 | x | | optionalSanitizer.js:26:7:26:39 | target | | optionalSanitizer.js:26:16:26:32 | document.location | | optionalSanitizer.js:26:16:26:32 | document.location | | optionalSanitizer.js:26:16:26:39 | documen ... .search | | optionalSanitizer.js:31:7:31:23 | tainted2 | | optionalSanitizer.js:31:18:31:23 | target | | optionalSanitizer.js:32:18:32:25 | tainted2 | | optionalSanitizer.js:32:18:32:25 | tainted2 | | optionalSanitizer.js:34:5:34:36 | tainted2 | | optionalSanitizer.js:34:16:34:36 | sanitiz ... inted2) | | optionalSanitizer.js:34:28:34:35 | tainted2 | | optionalSanitizer.js:36:18:36:25 | tainted2 | | optionalSanitizer.js:36:18:36:25 | tainted2 | | optionalSanitizer.js:38:7:38:23 | tainted3 | | optionalSanitizer.js:38:18:38:23 | target | | optionalSanitizer.js:39:18:39:25 | tainted3 | | optionalSanitizer.js:39:18:39:25 | tainted3 | | optionalSanitizer.js:41:5:41:36 | tainted3 | | optionalSanitizer.js:41:16:41:36 | sanitiz ... inted3) | | optionalSanitizer.js:41:28:41:35 | tainted3 | | optionalSanitizer.js:43:18:43:25 | tainted3 | | optionalSanitizer.js:43:18:43:25 | tainted3 | | optionalSanitizer.js:45:18:45:56 | sanitiz ... target | | optionalSanitizer.js:45:18:45:56 | sanitiz ... target | | optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) | | optionalSanitizer.js:45:41:45:46 | target | | optionalSanitizer.js:45:51:45:56 | target | | react-native.js:7:7:7:33 | tainted | | react-native.js:7:17:7:33 | req.param("code") | | react-native.js:7:17:7:33 | req.param("code") | | react-native.js:8:18:8:24 | tainted | | react-native.js:8:18:8:24 | tainted | | react-native.js:9:27:9:33 | tainted | | react-native.js:9:27:9:33 | tainted | | sanitiser.js:16:7:16:27 | tainted | | sanitiser.js:16:17:16:27 | window.name | | sanitiser.js:16:17:16:27 | window.name | | sanitiser.js:23:21:23:44 | '' + ... '' | | sanitiser.js:23:21:23:44 | '' + ... '' | | sanitiser.js:23:29:23:35 | tainted | | sanitiser.js:30:21:30:44 | '' + ... '' | | sanitiser.js:30:21:30:44 | '' + ... '' | | sanitiser.js:30:29:30:35 | tainted | | sanitiser.js:33:21:33:44 | '' + ... '' | | sanitiser.js:33:21:33:44 | '' + ... '' | | sanitiser.js:33:29:33:35 | tainted | | sanitiser.js:38:21:38:44 | '' + ... '' | | sanitiser.js:38:21:38:44 | '' + ... '' | | sanitiser.js:38:29:38:35 | tainted | | sanitiser.js:45:21:45:44 | '' + ... '' | | sanitiser.js:45:21:45:44 | '' + ... '' | | sanitiser.js:45:29:45:35 | tainted | | stored-xss.js:2:39:2:55 | document.location | | stored-xss.js:2:39:2:55 | document.location | | stored-xss.js:2:39:2:62 | documen ... .search | | stored-xss.js:3:35:3:51 | document.location | | stored-xss.js:3:35:3:51 | document.location | | stored-xss.js:3:35:3:58 | documen ... .search | | stored-xss.js:5:20:5:52 | session ... ssion') | | stored-xss.js:5:20:5:52 | session ... ssion') | | stored-xss.js:8:20:8:48 | localSt ... local') | | stored-xss.js:8:20:8:48 | localSt ... local') | | stored-xss.js:10:9:10:44 | href | | stored-xss.js:10:16:10:44 | localSt ... local') | | stored-xss.js:12:20:12:54 | "" | | stored-xss.js:12:20:12:54 | "" | | stored-xss.js:12:35:12:38 | href | | string-manipulations.js:3:16:3:32 | document.location | | string-manipulations.js:3:16:3:32 | document.location | | string-manipulations.js:3:16:3:32 | document.location | | string-manipulations.js:4:16:4:32 | document.location | | string-manipulations.js:4:16:4:32 | document.location | | string-manipulations.js:4:16:4:37 | documen ... on.href | | string-manipulations.js:4:16:4:37 | documen ... on.href | | string-manipulations.js:5:16:5:32 | document.location | | string-manipulations.js:5:16:5:32 | document.location | | string-manipulations.js:5:16:5:37 | documen ... on.href | | string-manipulations.js:5:16:5:47 | documen ... lueOf() | | string-manipulations.js:5:16:5:47 | documen ... lueOf() | | string-manipulations.js:6:16:6:32 | document.location | | string-manipulations.js:6:16:6:32 | document.location | | string-manipulations.js:6:16:6:37 | documen ... on.href | | string-manipulations.js:6:16:6:43 | documen ... f.sup() | | string-manipulations.js:6:16:6:43 | documen ... f.sup() | | string-manipulations.js:7:16:7:32 | document.location | | string-manipulations.js:7:16:7:32 | document.location | | string-manipulations.js:7:16:7:37 | documen ... on.href | | string-manipulations.js:7:16:7:51 | documen ... rCase() | | string-manipulations.js:7:16:7:51 | documen ... rCase() | | string-manipulations.js:8:16:8:32 | document.location | | string-manipulations.js:8:16:8:32 | document.location | | string-manipulations.js:8:16:8:37 | documen ... on.href | | string-manipulations.js:8:16:8:48 | documen ... mLeft() | | string-manipulations.js:8:16:8:48 | documen ... mLeft() | | string-manipulations.js:9:16:9:58 | String. ... n.href) | | string-manipulations.js:9:16:9:58 | String. ... n.href) | | string-manipulations.js:9:36:9:52 | document.location | | string-manipulations.js:9:36:9:52 | document.location | | string-manipulations.js:9:36:9:57 | documen ... on.href | | string-manipulations.js:10:16:10:45 | String( ... n.href) | | string-manipulations.js:10:16:10:45 | String( ... n.href) | | string-manipulations.js:10:23:10:39 | document.location | | string-manipulations.js:10:23:10:39 | document.location | | string-manipulations.js:10:23:10:44 | documen ... on.href | | translate.js:6:7:6:39 | target | | translate.js:6:16:6:32 | document.location | | translate.js:6:16:6:32 | document.location | | translate.js:6:16:6:39 | documen ... .search | | translate.js:7:42:7:47 | target | | translate.js:7:42:7:60 | target.substring(1) | | translate.js:9:27:9:50 | searchP ... 'term') | | translate.js:9:27:9:50 | searchP ... 'term') | | tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | | tst3.js:2:23:2:74 | decodeU ... str(1)) | | tst3.js:2:42:2:56 | window.location | | tst3.js:2:42:2:56 | window.location | | tst3.js:2:42:2:63 | window. ... .search | | tst3.js:2:42:2:73 | window. ... bstr(1) | | tst3.js:4:25:4:28 | data | | tst3.js:4:25:4:32 | data.src | | tst3.js:4:25:4:32 | data.src | | tst3.js:5:26:5:29 | data | | tst3.js:5:26:5:31 | data.p | | tst3.js:5:26:5:31 | data.p | | tst3.js:7:32:7:35 | data | | tst3.js:7:32:7:37 | data.p | | tst3.js:7:32:7:37 | data.p | | tst3.js:9:37:9:40 | data | | tst3.js:9:37:9:42 | data.p | | tst3.js:9:37:9:42 | data.p | | tst3.js:10:38:10:41 | data | | tst3.js:10:38:10:43 | data.p | | tst3.js:10:38:10:43 | data.p | | tst.js:2:7:2:39 | target | | tst.js:2:16:2:32 | document.location | | tst.js:2:16:2:32 | document.location | | tst.js:2:16:2:39 | documen ... .search | | tst.js:5:18:5:23 | target | | tst.js:5:18:5:23 | target | | tst.js:8:18:8:126 | "" | | tst.js:8:18:8:126 | "" | | tst.js:8:37:8:53 | document.location | | tst.js:8:37:8:53 | document.location | | tst.js:8:37:8:58 | documen ... on.href | | tst.js:8:37:8:114 | documen ... t=")+8) | | tst.js:12:5:12:42 | '
' | | tst.js:12:5:12:42 | '
' | | tst.js:12:28:12:33 | target | | tst.js:17:25:17:41 | document.location | | tst.js:17:25:17:41 | document.location | | tst.js:18:18:18:35 | params.get('name') | | tst.js:18:18:18:35 | params.get('name') | | tst.js:20:42:20:47 | target | | tst.js:20:42:20:60 | target.substring(1) | | tst.js:21:18:21:41 | searchP ... 'name') | | tst.js:21:18:21:41 | searchP ... 'name') | | tst.js:24:14:24:19 | target | | tst.js:26:18:26:23 | target | | tst.js:26:18:26:23 | target | | tst.js:28:5:28:21 | document.location | | tst.js:28:5:28:21 | document.location | | tst.js:28:5:28:28 | documen ... .search | | tst.js:31:10:31:26 | document.location | | tst.js:31:10:31:26 | document.location | | tst.js:31:10:31:33 | documen ... .search | | tst.js:34:16:34:20 | bar() | | tst.js:34:16:34:20 | bar() | | tst.js:40:16:40:44 | baz(doc ... search) | | tst.js:40:16:40:44 | baz(doc ... search) | | tst.js:40:20:40:36 | document.location | | tst.js:40:20:40:36 | document.location | | tst.js:40:20:40:43 | documen ... .search | | tst.js:46:16:46:45 | wrap(do ... search) | | tst.js:46:16:46:45 | wrap(do ... search) | | tst.js:46:21:46:37 | document.location | | tst.js:46:21:46:37 | document.location | | tst.js:46:21:46:44 | documen ... .search | | tst.js:54:16:54:45 | chop(do ... search) | | tst.js:54:16:54:45 | chop(do ... search) | | tst.js:54:21:54:37 | document.location | | tst.js:54:21:54:37 | document.location | | tst.js:54:21:54:44 | documen ... .search | | tst.js:56:16:56:45 | chop(do ... search) | | tst.js:56:16:56:45 | chop(do ... search) | | tst.js:56:21:56:37 | document.location | | tst.js:56:21:56:37 | document.location | | tst.js:56:21:56:44 | documen ... .search | | tst.js:58:16:58:32 | wrap(chop(bar())) | | tst.js:58:16:58:32 | wrap(chop(bar())) | | tst.js:58:21:58:31 | chop(bar()) | | tst.js:58:26:58:30 | bar() | | tst.js:60:34:60:34 | s | | tst.js:62:18:62:18 | s | | tst.js:62:18:62:18 | s | | tst.js:64:25:64:41 | document.location | | tst.js:64:25:64:41 | document.location | | tst.js:64:25:64:48 | documen ... .search | | tst.js:65:25:65:41 | document.location | | tst.js:65:25:65:41 | document.location | | tst.js:65:25:65:48 | documen ... .search | | tst.js:68:16:68:20 | bar() | | tst.js:68:16:68:20 | bar() | | tst.js:70:1:70:27 | [,docum ... search] | | tst.js:70:3:70:19 | document.location | | tst.js:70:3:70:19 | document.location | | tst.js:70:3:70:26 | documen ... .search | | tst.js:70:46:70:46 | x | | tst.js:73:20:73:20 | x | | tst.js:73:20:73:20 | x | | tst.js:77:49:77:65 | document.location | | tst.js:77:49:77:65 | document.location | | tst.js:77:49:77:72 | documen ... .search | | tst.js:77:49:77:72 | documen ... .search | | tst.js:81:26:81:42 | document.location | | tst.js:81:26:81:42 | document.location | | tst.js:81:26:81:49 | documen ... .search | | tst.js:81:26:81:49 | documen ... .search | | tst.js:82:25:82:41 | document.location | | tst.js:82:25:82:41 | document.location | | tst.js:82:25:82:48 | documen ... .search | | tst.js:82:25:82:48 | documen ... .search | | tst.js:84:33:84:49 | document.location | | tst.js:84:33:84:49 | document.location | | tst.js:84:33:84:56 | documen ... .search | | tst.js:84:33:84:56 | documen ... .search | | tst.js:85:32:85:48 | document.location | | tst.js:85:32:85:48 | document.location | | tst.js:85:32:85:55 | documen ... .search | | tst.js:85:32:85:55 | documen ... .search | | tst.js:90:39:90:55 | document.location | | tst.js:90:39:90:55 | document.location | | tst.js:90:39:90:62 | documen ... .search | | tst.js:90:39:90:62 | documen ... .search | | tst.js:96:30:96:46 | document.location | | tst.js:96:30:96:46 | document.location | | tst.js:96:30:96:53 | documen ... .search | | tst.js:96:30:96:53 | documen ... .search | | tst.js:102:25:102:41 | document.location | | tst.js:102:25:102:41 | document.location | | tst.js:102:25:102:48 | documen ... .search | | tst.js:102:25:102:48 | documen ... .search | | tst.js:107:7:107:44 | v | | tst.js:107:11:107:27 | document.location | | tst.js:107:11:107:27 | document.location | | tst.js:107:11:107:34 | documen ... .search | | tst.js:107:11:107:44 | documen ... bstr(1) | | tst.js:110:18:110:18 | v | | tst.js:110:18:110:18 | v | | tst.js:136:18:136:18 | v | | tst.js:136:18:136:18 | v | | tst.js:148:29:148:43 | window.location | | tst.js:148:29:148:43 | window.location | | tst.js:148:29:148:50 | window. ... .search | | tst.js:151:29:151:29 | v | | tst.js:151:49:151:49 | v | | tst.js:151:49:151:49 | v | | tst.js:155:29:155:46 | xssSourceService() | | tst.js:155:29:155:46 | xssSourceService() | | tst.js:158:40:158:54 | window.location | | tst.js:158:40:158:54 | window.location | | tst.js:158:40:158:61 | window. ... .search | | tst.js:177:9:177:41 | target | | tst.js:177:18:177:34 | document.location | | tst.js:177:18:177:34 | document.location | | tst.js:177:18:177:41 | documen ... .search | | tst.js:180:28:180:33 | target | | tst.js:180:28:180:33 | target | | tst.js:184:9:184:42 | tainted | | tst.js:184:19:184:35 | document.location | | tst.js:184:19:184:35 | document.location | | tst.js:184:19:184:42 | documen ... .search | | tst.js:186:31:186:37 | tainted | | tst.js:186:31:186:37 | tainted | | tst.js:188:42:188:48 | tainted | | tst.js:188:42:188:48 | tainted | | tst.js:189:33:189:39 | tainted | | tst.js:189:33:189:39 | tainted | | tst.js:191:54:191:60 | tainted | | tst.js:191:54:191:60 | tainted | | tst.js:192:45:192:51 | tainted | | tst.js:192:45:192:51 | tainted | | tst.js:193:49:193:55 | tainted | | tst.js:193:49:193:55 | tainted | | tst.js:197:9:197:42 | tainted | | tst.js:197:19:197:35 | document.location | | tst.js:197:19:197:35 | document.location | | tst.js:197:19:197:42 | documen ... .search | | tst.js:199:67:199:73 | tainted | | tst.js:199:67:199:73 | tainted | | tst.js:200:67:200:73 | tainted | | tst.js:200:67:200:73 | tainted | | tst.js:204:35:204:41 | tainted | | tst.js:206:46:206:52 | tainted | | tst.js:207:38:207:44 | tainted | | tst.js:208:35:208:41 | tainted | | tst.js:212:28:212:46 | this.state.tainted1 | | tst.js:212:28:212:46 | this.state.tainted1 | | tst.js:213:28:213:46 | this.state.tainted2 | | tst.js:213:28:213:46 | this.state.tainted2 | | tst.js:214:28:214:46 | this.state.tainted3 | | tst.js:214:28:214:46 | this.state.tainted3 | | tst.js:218:32:218:49 | prevState.tainted4 | | tst.js:218:32:218:49 | prevState.tainted4 | | tst.js:225:28:225:46 | this.props.tainted1 | | tst.js:225:28:225:46 | this.props.tainted1 | | tst.js:226:28:226:46 | this.props.tainted2 | | tst.js:226:28:226:46 | this.props.tainted2 | | tst.js:227:28:227:46 | this.props.tainted3 | | tst.js:227:28:227:46 | this.props.tainted3 | | tst.js:231:32:231:49 | prevProps.tainted4 | | tst.js:231:32:231:49 | prevProps.tainted4 | | tst.js:236:35:236:41 | tainted | | tst.js:238:20:238:26 | tainted | | tst.js:240:23:240:29 | tainted | | tst.js:241:23:241:29 | tainted | | tst.js:247:39:247:55 | props.propTainted | | tst.js:251:60:251:82 | this.st ... Tainted | | tst.js:251:60:251:82 | this.st ... Tainted | | tst.js:255:23:255:29 | tainted | | tst.js:259:7:259:17 | window.name | | tst.js:259:7:259:17 | window.name | | tst.js:259:7:259:17 | window.name | | tst.js:260:7:260:10 | name | | tst.js:260:7:260:10 | name | | tst.js:260:7:260:10 | name | | tst.js:264:11:264:21 | window.name | | tst.js:264:11:264:21 | window.name | | tst.js:264:11:264:21 | window.name | | tst.js:280:22:280:29 | location | | tst.js:280:22:280:29 | location | | tst.js:280:22:280:29 | location | | tst.js:285:9:285:29 | tainted | | tst.js:285:19:285:29 | window.name | | tst.js:285:19:285:29 | window.name | | tst.js:288:59:288:65 | tainted | | tst.js:288:59:288:65 | tainted | | tst.js:301:9:301:16 | location | | tst.js:301:9:301:16 | location | | tst.js:302:10:302:10 | e | | tst.js:303:20:303:20 | e | | tst.js:303:20:303:20 | e | | tst.js:308:10:308:17 | location | | tst.js:308:10:308:17 | location | | tst.js:310:10:310:10 | e | | tst.js:311:20:311:20 | e | | tst.js:311:20:311:20 | e | | tst.js:316:35:316:42 | location | | tst.js:316:35:316:42 | location | | tst.js:316:35:316:42 | location | | tst.js:327:18:327:34 | document.location | | tst.js:327:18:327:34 | document.location | | tst.js:332:18:332:35 | params.get('name') | | tst.js:332:18:332:35 | params.get('name') | | tst.js:341:20:341:36 | document.location | | tst.js:341:20:341:36 | document.location | | tst.js:343:5:343:30 | getUrl( ... ring(1) | | tst.js:343:5:343:30 | getUrl( ... ring(1) | | tst.js:348:7:348:39 | target | | tst.js:348:16:348:32 | document.location | | tst.js:348:16:348:32 | document.location | | tst.js:348:16:348:39 | documen ... .search | | tst.js:349:12:349:17 | target | | tst.js:349:12:349:17 | target | | tst.js:355:10:355:42 | target | | tst.js:355:19:355:35 | document.location | | tst.js:355:19:355:35 | document.location | | tst.js:355:19:355:42 | documen ... .search | | tst.js:356:16:356:21 | target | | tst.js:356:16:356:21 | target | | tst.js:360:21:360:26 | target | | tst.js:360:21:360:26 | target | | tst.js:363:18:363:23 | target | | tst.js:363:18:363:23 | target | | tst.js:371:7:371:39 | target | | tst.js:371:16:371:32 | document.location | | tst.js:371:16:371:32 | document.location | | tst.js:371:16:371:39 | documen ... .search | | tst.js:374:18:374:23 | target | | tst.js:374:18:374:23 | target | | tst.js:381:7:381:39 | target | | tst.js:381:16:381:32 | document.location | | tst.js:381:16:381:32 | document.location | | tst.js:381:16:381:39 | documen ... .search | | tst.js:384:18:384:23 | target | | tst.js:384:18:384:23 | target | | tst.js:386:18:386:23 | target | | tst.js:386:18:386:29 | target.taint | | tst.js:386:18:386:29 | target.taint | | tst.js:391:19:391:35 | document.location | | tst.js:391:19:391:35 | document.location | | tst.js:391:19:391:42 | documen ... .search | | tst.js:392:18:392:30 | target.taint3 | | tst.js:392:18:392:30 | target.taint3 | | tst.js:397:18:397:23 | target | | tst.js:397:18:397:30 | target.taint5 | | tst.js:397:18:397:30 | target.taint5 | | tst.js:406:18:406:23 | target | | tst.js:406:18:406:30 | target.taint7 | | tst.js:406:18:406:30 | target.taint7 | | tst.js:408:19:408:24 | target | | tst.js:408:19:408:31 | target.taint8 | | tst.js:409:18:409:30 | target.taint8 | | tst.js:409:18:409:30 | target.taint8 | | tst.js:416:7:416:46 | payload | | tst.js:416:17:416:31 | window.location | | tst.js:416:17:416:31 | window.location | | tst.js:416:17:416:46 | window. ... bstr(1) | | tst.js:417:18:417:24 | payload | | tst.js:417:18:417:24 | payload | | tst.js:419:7:419:55 | match | | tst.js:419:15:419:29 | window.location | | tst.js:419:15:419:29 | window.location | | tst.js:419:15:419:55 | window. ... (\\w+)/) | | tst.js:421:20:421:24 | match | | tst.js:421:20:421:27 | match[1] | | tst.js:421:20:421:27 | match[1] | | tst.js:424:18:424:32 | window.location | | tst.js:424:18:424:32 | window.location | | tst.js:424:18:424:51 | window. ... '#')[1] | | tst.js:424:18:424:51 | window. ... '#')[1] | | typeahead.js:9:28:9:30 | loc | | typeahead.js:9:28:9:30 | loc | | typeahead.js:10:16:10:18 | loc | | typeahead.js:10:16:10:18 | loc | | typeahead.js:20:13:20:45 | target | | typeahead.js:20:22:20:38 | document.location | | typeahead.js:20:22:20:38 | document.location | | typeahead.js:20:22:20:45 | documen ... .search | | typeahead.js:21:12:21:17 | target | | typeahead.js:24:30:24:32 | val | | typeahead.js:25:18:25:20 | val | | typeahead.js:25:18:25:20 | val | | v-html.vue:2:8:2:23 | v-html=tainted | | v-html.vue:2:8:2:23 | v-html=tainted | | v-html.vue:6:42:6:58 | document.location | | v-html.vue:6:42:6:58 | document.location | | winjs.js:2:7:2:53 | tainted | | winjs.js:2:17:2:33 | document.location | | winjs.js:2:17:2:33 | document.location | | winjs.js:2:17:2:40 | documen ... .search | | winjs.js:2:17:2:53 | documen ... ring(1) | | winjs.js:3:43:3:49 | tainted | | winjs.js:3:43:3:49 | tainted | | winjs.js:4:43:4:49 | tainted | | winjs.js:4:43:4:49 | tainted | edges | addEventListener.js:1:43:1:47 | event | addEventListener.js:2:20:2:24 | event | | addEventListener.js:1:43:1:47 | event | addEventListener.js:2:20:2:24 | event | | addEventListener.js:2:20:2:24 | event | addEventListener.js:2:20:2:29 | event.data | | addEventListener.js:2:20:2:24 | event | addEventListener.js:2:20:2:29 | event.data | | addEventListener.js:5:43:5:48 | data | addEventListener.js:6:20:6:23 | data | | addEventListener.js:5:43:5:48 | data | addEventListener.js:6:20:6:23 | data | | addEventListener.js:5:43:5:48 | {data} | addEventListener.js:5:44:5:47 | data | | addEventListener.js:5:43:5:48 | {data} | addEventListener.js:5:44:5:47 | data | | addEventListener.js:5:44:5:47 | data | addEventListener.js:5:43:5:48 | data | | addEventListener.js:10:21:10:25 | event | addEventListener.js:12:24:12:28 | event | | addEventListener.js:10:21:10:25 | event | addEventListener.js:12:24:12:28 | event | | addEventListener.js:12:24:12:28 | event | addEventListener.js:12:24:12:33 | event.data | | addEventListener.js:12:24:12:28 | event | addEventListener.js:12:24:12:33 | event.data | | exception-xss.js:2:6:2:28 | foo | exception-xss.js:86:17:86:19 | foo | | exception-xss.js:2:6:2:28 | foo | exception-xss.js:86:17:86:19 | foo | | exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo | | exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo | | jquery.js:2:7:2:40 | tainted | jquery.js:4:5:4:11 | tainted | | jquery.js:2:7:2:40 | tainted | jquery.js:4:5:4:11 | tainted | | jquery.js:2:7:2:40 | tainted | jquery.js:7:20:7:26 | tainted | | jquery.js:2:7:2:40 | tainted | jquery.js:8:28:8:34 | tainted | | jquery.js:2:17:2:33 | document.location | jquery.js:2:17:2:40 | documen ... .search | | jquery.js:2:17:2:33 | document.location | jquery.js:2:17:2:40 | documen ... .search | | jquery.js:2:17:2:40 | documen ... .search | jquery.js:2:7:2:40 | tainted | | jquery.js:7:20:7:26 | tainted | jquery.js:7:5:7:34 | "
" | | jquery.js:7:20:7:26 | tainted | jquery.js:7:5:7:34 | "
" | | jquery.js:8:28:8:34 | tainted | jquery.js:8:18:8:34 | "XSS: " + tainted | | jquery.js:8:28:8:34 | tainted | jquery.js:8:18:8:34 | "XSS: " + tainted | | nodemailer.js:13:50:13:66 | req.query.message | nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | | nodemailer.js:13:50:13:66 | req.query.message | nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | | nodemailer.js:13:50:13:66 | req.query.message | nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | | nodemailer.js:13:50:13:66 | req.query.message | nodemailer.js:13:11:13:69 | `Hi, yo ... sage}.` | | optionalSanitizer.js:2:7:2:39 | target | optionalSanitizer.js:6:18:6:23 | target | | optionalSanitizer.js:2:7:2:39 | target | optionalSanitizer.js:6:18:6:23 | target | | optionalSanitizer.js:2:7:2:39 | target | optionalSanitizer.js:8:17:8:22 | target | | optionalSanitizer.js:2:7:2:39 | target | optionalSanitizer.js:15:9:15:14 | target | | optionalSanitizer.js:2:16:2:32 | document.location | optionalSanitizer.js:2:16:2:39 | documen ... .search | | optionalSanitizer.js:2:16:2:32 | document.location | optionalSanitizer.js:2:16:2:39 | documen ... .search | | optionalSanitizer.js:2:16:2:39 | documen ... .search | optionalSanitizer.js:2:7:2:39 | target | | optionalSanitizer.js:8:7:8:22 | tainted | optionalSanitizer.js:9:18:9:24 | tainted | | optionalSanitizer.js:8:7:8:22 | tainted | optionalSanitizer.js:9:18:9:24 | tainted | | optionalSanitizer.js:8:17:8:22 | target | optionalSanitizer.js:8:7:8:22 | tainted | | optionalSanitizer.js:15:9:15:14 | target | optionalSanitizer.js:16:18:16:18 | x | | optionalSanitizer.js:16:18:16:18 | x | optionalSanitizer.js:17:20:17:20 | x | | optionalSanitizer.js:16:18:16:18 | x | optionalSanitizer.js:17:20:17:20 | x | | optionalSanitizer.js:26:7:26:39 | target | optionalSanitizer.js:31:18:31:23 | target | | optionalSanitizer.js:26:7:26:39 | target | optionalSanitizer.js:38:18:38:23 | target | | optionalSanitizer.js:26:7:26:39 | target | optionalSanitizer.js:45:41:45:46 | target | | optionalSanitizer.js:26:7:26:39 | target | optionalSanitizer.js:45:51:45:56 | target | | optionalSanitizer.js:26:16:26:32 | document.location | optionalSanitizer.js:26:16:26:39 | documen ... .search | | optionalSanitizer.js:26:16:26:32 | document.location | optionalSanitizer.js:26:16:26:39 | documen ... .search | | optionalSanitizer.js:26:16:26:39 | documen ... .search | optionalSanitizer.js:26:7:26:39 | target | | optionalSanitizer.js:31:7:31:23 | tainted2 | optionalSanitizer.js:32:18:32:25 | tainted2 | | optionalSanitizer.js:31:7:31:23 | tainted2 | optionalSanitizer.js:32:18:32:25 | tainted2 | | optionalSanitizer.js:31:7:31:23 | tainted2 | optionalSanitizer.js:34:28:34:35 | tainted2 | | optionalSanitizer.js:31:7:31:23 | tainted2 | optionalSanitizer.js:36:18:36:25 | tainted2 | | optionalSanitizer.js:31:7:31:23 | tainted2 | optionalSanitizer.js:36:18:36:25 | tainted2 | | optionalSanitizer.js:31:18:31:23 | target | optionalSanitizer.js:31:7:31:23 | tainted2 | | optionalSanitizer.js:34:5:34:36 | tainted2 | optionalSanitizer.js:36:18:36:25 | tainted2 | | optionalSanitizer.js:34:5:34:36 | tainted2 | optionalSanitizer.js:36:18:36:25 | tainted2 | | optionalSanitizer.js:34:16:34:36 | sanitiz ... inted2) | optionalSanitizer.js:34:5:34:36 | tainted2 | | optionalSanitizer.js:34:28:34:35 | tainted2 | optionalSanitizer.js:34:16:34:36 | sanitiz ... inted2) | | optionalSanitizer.js:38:7:38:23 | tainted3 | optionalSanitizer.js:39:18:39:25 | tainted3 | | optionalSanitizer.js:38:7:38:23 | tainted3 | optionalSanitizer.js:39:18:39:25 | tainted3 | | optionalSanitizer.js:38:7:38:23 | tainted3 | optionalSanitizer.js:41:28:41:35 | tainted3 | | optionalSanitizer.js:38:7:38:23 | tainted3 | optionalSanitizer.js:43:18:43:25 | tainted3 | | optionalSanitizer.js:38:7:38:23 | tainted3 | optionalSanitizer.js:43:18:43:25 | tainted3 | | optionalSanitizer.js:38:18:38:23 | target | optionalSanitizer.js:38:7:38:23 | tainted3 | | optionalSanitizer.js:41:5:41:36 | tainted3 | optionalSanitizer.js:43:18:43:25 | tainted3 | | optionalSanitizer.js:41:5:41:36 | tainted3 | optionalSanitizer.js:43:18:43:25 | tainted3 | | optionalSanitizer.js:41:16:41:36 | sanitiz ... inted3) | optionalSanitizer.js:41:5:41:36 | tainted3 | | optionalSanitizer.js:41:28:41:35 | tainted3 | optionalSanitizer.js:41:16:41:36 | sanitiz ... inted3) | | optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) | optionalSanitizer.js:45:18:45:56 | sanitiz ... target | | optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) | optionalSanitizer.js:45:18:45:56 | sanitiz ... target | | optionalSanitizer.js:45:41:45:46 | target | optionalSanitizer.js:45:29:45:47 | sanitizeBad(target) | | optionalSanitizer.js:45:51:45:56 | target | optionalSanitizer.js:45:18:45:56 | sanitiz ... target | | optionalSanitizer.js:45:51:45:56 | target | optionalSanitizer.js:45:18:45:56 | sanitiz ... target | | react-native.js:7:7:7:33 | tainted | react-native.js:8:18:8:24 | tainted | | react-native.js:7:7:7:33 | tainted | react-native.js:8:18:8:24 | tainted | | react-native.js:7:7:7:33 | tainted | react-native.js:9:27:9:33 | tainted | | react-native.js:7:7:7:33 | tainted | react-native.js:9:27:9:33 | tainted | | react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted | | react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted | | sanitiser.js:16:7:16:27 | tainted | sanitiser.js:23:29:23:35 | tainted | | sanitiser.js:16:7:16:27 | tainted | sanitiser.js:30:29:30:35 | tainted | | sanitiser.js:16:7:16:27 | tainted | sanitiser.js:33:29:33:35 | tainted | | sanitiser.js:16:7:16:27 | tainted | sanitiser.js:38:29:38:35 | tainted | | sanitiser.js:16:7:16:27 | tainted | sanitiser.js:45:29:45:35 | tainted | | sanitiser.js:16:17:16:27 | window.name | sanitiser.js:16:7:16:27 | tainted | | sanitiser.js:16:17:16:27 | window.name | sanitiser.js:16:7:16:27 | tainted | | sanitiser.js:23:29:23:35 | tainted | sanitiser.js:23:21:23:44 | '' + ... '' | | sanitiser.js:23:29:23:35 | tainted | sanitiser.js:23:21:23:44 | '' + ... '' | | sanitiser.js:30:29:30:35 | tainted | sanitiser.js:30:21:30:44 | '' + ... '' | | sanitiser.js:30:29:30:35 | tainted | sanitiser.js:30:21:30:44 | '' + ... '' | | sanitiser.js:33:29:33:35 | tainted | sanitiser.js:33:21:33:44 | '' + ... '' | | sanitiser.js:33:29:33:35 | tainted | sanitiser.js:33:21:33:44 | '' + ... '' | | sanitiser.js:38:29:38:35 | tainted | sanitiser.js:38:21:38:44 | '' + ... '' | | sanitiser.js:38:29:38:35 | tainted | sanitiser.js:38:21:38:44 | '' + ... '' | | sanitiser.js:45:29:45:35 | tainted | sanitiser.js:45:21:45:44 | '' + ... '' | | sanitiser.js:45:29:45:35 | tainted | sanitiser.js:45:21:45:44 | '' + ... '' | | stored-xss.js:2:39:2:55 | document.location | stored-xss.js:2:39:2:62 | documen ... .search | | stored-xss.js:2:39:2:55 | document.location | stored-xss.js:2:39:2:62 | documen ... .search | | stored-xss.js:2:39:2:62 | documen ... .search | stored-xss.js:5:20:5:52 | session ... ssion') | | stored-xss.js:2:39:2:62 | documen ... .search | stored-xss.js:5:20:5:52 | session ... ssion') | | stored-xss.js:3:35:3:51 | document.location | stored-xss.js:3:35:3:58 | documen ... .search | | stored-xss.js:3:35:3:51 | document.location | stored-xss.js:3:35:3:58 | documen ... .search | | stored-xss.js:3:35:3:58 | documen ... .search | stored-xss.js:8:20:8:48 | localSt ... local') | | stored-xss.js:3:35:3:58 | documen ... .search | stored-xss.js:8:20:8:48 | localSt ... local') | | stored-xss.js:3:35:3:58 | documen ... .search | stored-xss.js:10:16:10:44 | localSt ... local') | | stored-xss.js:10:9:10:44 | href | stored-xss.js:12:35:12:38 | href | | stored-xss.js:10:16:10:44 | localSt ... local') | stored-xss.js:10:9:10:44 | href | | stored-xss.js:12:35:12:38 | href | stored-xss.js:12:20:12:54 | "" | | stored-xss.js:12:35:12:38 | href | stored-xss.js:12:20:12:54 | "" | | string-manipulations.js:3:16:3:32 | document.location | string-manipulations.js:3:16:3:32 | document.location | | string-manipulations.js:4:16:4:32 | document.location | string-manipulations.js:4:16:4:37 | documen ... on.href | | string-manipulations.js:4:16:4:32 | document.location | string-manipulations.js:4:16:4:37 | documen ... on.href | | string-manipulations.js:4:16:4:32 | document.location | string-manipulations.js:4:16:4:37 | documen ... on.href | | string-manipulations.js:4:16:4:32 | document.location | string-manipulations.js:4:16:4:37 | documen ... on.href | | string-manipulations.js:5:16:5:32 | document.location | string-manipulations.js:5:16:5:37 | documen ... on.href | | string-manipulations.js:5:16:5:32 | document.location | string-manipulations.js:5:16:5:37 | documen ... on.href | | string-manipulations.js:5:16:5:37 | documen ... on.href | string-manipulations.js:5:16:5:47 | documen ... lueOf() | | string-manipulations.js:5:16:5:37 | documen ... on.href | string-manipulations.js:5:16:5:47 | documen ... lueOf() | | string-manipulations.js:6:16:6:32 | document.location | string-manipulations.js:6:16:6:37 | documen ... on.href | | string-manipulations.js:6:16:6:32 | document.location | string-manipulations.js:6:16:6:37 | documen ... on.href | | string-manipulations.js:6:16:6:37 | documen ... on.href | string-manipulations.js:6:16:6:43 | documen ... f.sup() | | string-manipulations.js:6:16:6:37 | documen ... on.href | string-manipulations.js:6:16:6:43 | documen ... f.sup() | | string-manipulations.js:7:16:7:32 | document.location | string-manipulations.js:7:16:7:37 | documen ... on.href | | string-manipulations.js:7:16:7:32 | document.location | string-manipulations.js:7:16:7:37 | documen ... on.href | | string-manipulations.js:7:16:7:37 | documen ... on.href | string-manipulations.js:7:16:7:51 | documen ... rCase() | | string-manipulations.js:7:16:7:37 | documen ... on.href | string-manipulations.js:7:16:7:51 | documen ... rCase() | | string-manipulations.js:8:16:8:32 | document.location | string-manipulations.js:8:16:8:37 | documen ... on.href | | string-manipulations.js:8:16:8:32 | document.location | string-manipulations.js:8:16:8:37 | documen ... on.href | | string-manipulations.js:8:16:8:37 | documen ... on.href | string-manipulations.js:8:16:8:48 | documen ... mLeft() | | string-manipulations.js:8:16:8:37 | documen ... on.href | string-manipulations.js:8:16:8:48 | documen ... mLeft() | | string-manipulations.js:9:36:9:52 | document.location | string-manipulations.js:9:36:9:57 | documen ... on.href | | string-manipulations.js:9:36:9:52 | document.location | string-manipulations.js:9:36:9:57 | documen ... on.href | | string-manipulations.js:9:36:9:57 | documen ... on.href | string-manipulations.js:9:16:9:58 | String. ... n.href) | | string-manipulations.js:9:36:9:57 | documen ... on.href | string-manipulations.js:9:16:9:58 | String. ... n.href) | | string-manipulations.js:10:23:10:39 | document.location | string-manipulations.js:10:23:10:44 | documen ... on.href | | string-manipulations.js:10:23:10:39 | document.location | string-manipulations.js:10:23:10:44 | documen ... on.href | | string-manipulations.js:10:23:10:44 | documen ... on.href | string-manipulations.js:10:16:10:45 | String( ... n.href) | | string-manipulations.js:10:23:10:44 | documen ... on.href | string-manipulations.js:10:16:10:45 | String( ... n.href) | | translate.js:6:7:6:39 | target | translate.js:7:42:7:47 | target | | translate.js:6:16:6:32 | document.location | translate.js:6:16:6:39 | documen ... .search | | translate.js:6:16:6:32 | document.location | translate.js:6:16:6:39 | documen ... .search | | translate.js:6:16:6:39 | documen ... .search | translate.js:6:7:6:39 | target | | translate.js:7:42:7:47 | target | translate.js:7:42:7:60 | target.substring(1) | | translate.js:7:42:7:60 | target.substring(1) | translate.js:9:27:9:50 | searchP ... 'term') | | translate.js:7:42:7:60 | target.substring(1) | translate.js:9:27:9:50 | searchP ... 'term') | | tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | tst3.js:4:25:4:28 | data | | tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | tst3.js:5:26:5:29 | data | | tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | tst3.js:7:32:7:35 | data | | tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | tst3.js:9:37:9:40 | data | | tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | tst3.js:10:38:10:41 | data | | tst3.js:2:23:2:74 | decodeU ... str(1)) | tst3.js:2:12:2:75 | JSON.pa ... tr(1))) | | tst3.js:2:42:2:56 | window.location | tst3.js:2:42:2:63 | window. ... .search | | tst3.js:2:42:2:56 | window.location | tst3.js:2:42:2:63 | window. ... .search | | tst3.js:2:42:2:63 | window. ... .search | tst3.js:2:42:2:73 | window. ... bstr(1) | | tst3.js:2:42:2:73 | window. ... bstr(1) | tst3.js:2:23:2:74 | decodeU ... str(1)) | | tst3.js:4:25:4:28 | data | tst3.js:4:25:4:32 | data.src | | tst3.js:4:25:4:28 | data | tst3.js:4:25:4:32 | data.src | | tst3.js:5:26:5:29 | data | tst3.js:5:26:5:31 | data.p | | tst3.js:5:26:5:29 | data | tst3.js:5:26:5:31 | data.p | | tst3.js:7:32:7:35 | data | tst3.js:7:32:7:37 | data.p | | tst3.js:7:32:7:35 | data | tst3.js:7:32:7:37 | data.p | | tst3.js:9:37:9:40 | data | tst3.js:9:37:9:42 | data.p | | tst3.js:9:37:9:40 | data | tst3.js:9:37:9:42 | data.p | | tst3.js:10:38:10:41 | data | tst3.js:10:38:10:43 | data.p | | tst3.js:10:38:10:41 | data | tst3.js:10:38:10:43 | data.p | | tst.js:2:7:2:39 | target | tst.js:5:18:5:23 | target | | tst.js:2:7:2:39 | target | tst.js:5:18:5:23 | target | | tst.js:2:7:2:39 | target | tst.js:12:28:12:33 | target | | tst.js:2:7:2:39 | target | tst.js:20:42:20:47 | target | | tst.js:2:16:2:32 | document.location | tst.js:2:16:2:39 | documen ... .search | | tst.js:2:16:2:32 | document.location | tst.js:2:16:2:39 | documen ... .search | | tst.js:2:16:2:39 | documen ... .search | tst.js:2:7:2:39 | target | | tst.js:8:37:8:53 | document.location | tst.js:8:37:8:58 | documen ... on.href | | tst.js:8:37:8:53 | document.location | tst.js:8:37:8:58 | documen ... on.href | | tst.js:8:37:8:58 | documen ... on.href | tst.js:8:37:8:114 | documen ... t=")+8) | | tst.js:8:37:8:114 | documen ... t=")+8) | tst.js:8:18:8:126 | "" | | tst.js:8:37:8:114 | documen ... t=")+8) | tst.js:8:18:8:126 | "" | | tst.js:12:28:12:33 | target | tst.js:12:5:12:42 | '
' | | tst.js:12:28:12:33 | target | tst.js:12:5:12:42 | '
' | | tst.js:17:25:17:41 | document.location | tst.js:18:18:18:35 | params.get('name') | | tst.js:17:25:17:41 | document.location | tst.js:18:18:18:35 | params.get('name') | | tst.js:17:25:17:41 | document.location | tst.js:18:18:18:35 | params.get('name') | | tst.js:17:25:17:41 | document.location | tst.js:18:18:18:35 | params.get('name') | | tst.js:20:42:20:47 | target | tst.js:20:42:20:60 | target.substring(1) | | tst.js:20:42:20:60 | target.substring(1) | tst.js:21:18:21:41 | searchP ... 'name') | | tst.js:20:42:20:60 | target.substring(1) | tst.js:21:18:21:41 | searchP ... 'name') | | tst.js:24:14:24:19 | target | tst.js:26:18:26:23 | target | | tst.js:24:14:24:19 | target | tst.js:26:18:26:23 | target | | tst.js:28:5:28:21 | document.location | tst.js:28:5:28:28 | documen ... .search | | tst.js:28:5:28:21 | document.location | tst.js:28:5:28:28 | documen ... .search | | tst.js:28:5:28:28 | documen ... .search | tst.js:24:14:24:19 | target | | tst.js:31:10:31:26 | document.location | tst.js:31:10:31:33 | documen ... .search | | tst.js:31:10:31:26 | document.location | tst.js:31:10:31:33 | documen ... .search | | tst.js:31:10:31:33 | documen ... .search | tst.js:34:16:34:20 | bar() | | tst.js:31:10:31:33 | documen ... .search | tst.js:34:16:34:20 | bar() | | tst.js:31:10:31:33 | documen ... .search | tst.js:58:26:58:30 | bar() | | tst.js:31:10:31:33 | documen ... .search | tst.js:68:16:68:20 | bar() | | tst.js:31:10:31:33 | documen ... .search | tst.js:68:16:68:20 | bar() | | tst.js:40:20:40:36 | document.location | tst.js:40:20:40:43 | documen ... .search | | tst.js:40:20:40:36 | document.location | tst.js:40:20:40:43 | documen ... .search | | tst.js:40:20:40:43 | documen ... .search | tst.js:40:16:40:44 | baz(doc ... search) | | tst.js:40:20:40:43 | documen ... .search | tst.js:40:16:40:44 | baz(doc ... search) | | tst.js:46:21:46:37 | document.location | tst.js:46:21:46:44 | documen ... .search | | tst.js:46:21:46:37 | document.location | tst.js:46:21:46:44 | documen ... .search | | tst.js:46:21:46:44 | documen ... .search | tst.js:46:16:46:45 | wrap(do ... search) | | tst.js:46:21:46:44 | documen ... .search | tst.js:46:16:46:45 | wrap(do ... search) | | tst.js:54:21:54:37 | document.location | tst.js:54:21:54:44 | documen ... .search | | tst.js:54:21:54:37 | document.location | tst.js:54:21:54:44 | documen ... .search | | tst.js:54:21:54:44 | documen ... .search | tst.js:54:16:54:45 | chop(do ... search) | | tst.js:54:21:54:44 | documen ... .search | tst.js:54:16:54:45 | chop(do ... search) | | tst.js:56:21:56:37 | document.location | tst.js:56:21:56:44 | documen ... .search | | tst.js:56:21:56:37 | document.location | tst.js:56:21:56:44 | documen ... .search | | tst.js:56:21:56:44 | documen ... .search | tst.js:56:16:56:45 | chop(do ... search) | | tst.js:56:21:56:44 | documen ... .search | tst.js:56:16:56:45 | chop(do ... search) | | tst.js:58:21:58:31 | chop(bar()) | tst.js:58:16:58:32 | wrap(chop(bar())) | | tst.js:58:21:58:31 | chop(bar()) | tst.js:58:16:58:32 | wrap(chop(bar())) | | tst.js:58:26:58:30 | bar() | tst.js:58:21:58:31 | chop(bar()) | | tst.js:60:34:60:34 | s | tst.js:62:18:62:18 | s | | tst.js:60:34:60:34 | s | tst.js:62:18:62:18 | s | | tst.js:64:25:64:41 | document.location | tst.js:64:25:64:48 | documen ... .search | | tst.js:64:25:64:41 | document.location | tst.js:64:25:64:48 | documen ... .search | | tst.js:64:25:64:48 | documen ... .search | tst.js:60:34:60:34 | s | | tst.js:65:25:65:41 | document.location | tst.js:65:25:65:48 | documen ... .search | | tst.js:65:25:65:41 | document.location | tst.js:65:25:65:48 | documen ... .search | | tst.js:65:25:65:48 | documen ... .search | tst.js:60:34:60:34 | s | | tst.js:70:1:70:27 | [,docum ... search] | tst.js:70:46:70:46 | x | | tst.js:70:3:70:19 | document.location | tst.js:70:3:70:26 | documen ... .search | | tst.js:70:3:70:19 | document.location | tst.js:70:3:70:26 | documen ... .search | | tst.js:70:3:70:26 | documen ... .search | tst.js:70:1:70:27 | [,docum ... search] | | tst.js:70:3:70:26 | documen ... .search | tst.js:70:46:70:46 | x | | tst.js:70:46:70:46 | x | tst.js:73:20:73:20 | x | | tst.js:70:46:70:46 | x | tst.js:73:20:73:20 | x | | tst.js:77:49:77:65 | document.location | tst.js:77:49:77:72 | documen ... .search | | tst.js:77:49:77:65 | document.location | tst.js:77:49:77:72 | documen ... .search | | tst.js:77:49:77:65 | document.location | tst.js:77:49:77:72 | documen ... .search | | tst.js:77:49:77:65 | document.location | tst.js:77:49:77:72 | documen ... .search | | tst.js:81:26:81:42 | document.location | tst.js:81:26:81:49 | documen ... .search | | tst.js:81:26:81:42 | document.location | tst.js:81:26:81:49 | documen ... .search | | tst.js:81:26:81:42 | document.location | tst.js:81:26:81:49 | documen ... .search | | tst.js:81:26:81:42 | document.location | tst.js:81:26:81:49 | documen ... .search | | tst.js:82:25:82:41 | document.location | tst.js:82:25:82:48 | documen ... .search | | tst.js:82:25:82:41 | document.location | tst.js:82:25:82:48 | documen ... .search | | tst.js:82:25:82:41 | document.location | tst.js:82:25:82:48 | documen ... .search | | tst.js:82:25:82:41 | document.location | tst.js:82:25:82:48 | documen ... .search | | tst.js:84:33:84:49 | document.location | tst.js:84:33:84:56 | documen ... .search | | tst.js:84:33:84:49 | document.location | tst.js:84:33:84:56 | documen ... .search | | tst.js:84:33:84:49 | document.location | tst.js:84:33:84:56 | documen ... .search | | tst.js:84:33:84:49 | document.location | tst.js:84:33:84:56 | documen ... .search | | tst.js:85:32:85:48 | document.location | tst.js:85:32:85:55 | documen ... .search | | tst.js:85:32:85:48 | document.location | tst.js:85:32:85:55 | documen ... .search | | tst.js:85:32:85:48 | document.location | tst.js:85:32:85:55 | documen ... .search | | tst.js:85:32:85:48 | document.location | tst.js:85:32:85:55 | documen ... .search | | tst.js:90:39:90:55 | document.location | tst.js:90:39:90:62 | documen ... .search | | tst.js:90:39:90:55 | document.location | tst.js:90:39:90:62 | documen ... .search | | tst.js:90:39:90:55 | document.location | tst.js:90:39:90:62 | documen ... .search | | tst.js:90:39:90:55 | document.location | tst.js:90:39:90:62 | documen ... .search | | tst.js:96:30:96:46 | document.location | tst.js:96:30:96:53 | documen ... .search | | tst.js:96:30:96:46 | document.location | tst.js:96:30:96:53 | documen ... .search | | tst.js:96:30:96:46 | document.location | tst.js:96:30:96:53 | documen ... .search | | tst.js:96:30:96:46 | document.location | tst.js:96:30:96:53 | documen ... .search | | tst.js:102:25:102:41 | document.location | tst.js:102:25:102:48 | documen ... .search | | tst.js:102:25:102:41 | document.location | tst.js:102:25:102:48 | documen ... .search | | tst.js:102:25:102:41 | document.location | tst.js:102:25:102:48 | documen ... .search | | tst.js:102:25:102:41 | document.location | tst.js:102:25:102:48 | documen ... .search | | tst.js:107:7:107:44 | v | tst.js:110:18:110:18 | v | | tst.js:107:7:107:44 | v | tst.js:110:18:110:18 | v | | tst.js:107:7:107:44 | v | tst.js:136:18:136:18 | v | | tst.js:107:7:107:44 | v | tst.js:136:18:136:18 | v | | tst.js:107:11:107:27 | document.location | tst.js:107:11:107:34 | documen ... .search | | tst.js:107:11:107:27 | document.location | tst.js:107:11:107:34 | documen ... .search | | tst.js:107:11:107:34 | documen ... .search | tst.js:107:11:107:44 | documen ... bstr(1) | | tst.js:107:11:107:44 | documen ... bstr(1) | tst.js:107:7:107:44 | v | | tst.js:148:29:148:43 | window.location | tst.js:148:29:148:50 | window. ... .search | | tst.js:148:29:148:43 | window.location | tst.js:148:29:148:50 | window. ... .search | | tst.js:148:29:148:50 | window. ... .search | tst.js:151:29:151:29 | v | | tst.js:151:29:151:29 | v | tst.js:151:49:151:49 | v | | tst.js:151:29:151:29 | v | tst.js:151:49:151:49 | v | | tst.js:158:40:158:54 | window.location | tst.js:158:40:158:61 | window. ... .search | | tst.js:158:40:158:54 | window.location | tst.js:158:40:158:61 | window. ... .search | | tst.js:158:40:158:61 | window. ... .search | tst.js:155:29:155:46 | xssSourceService() | | tst.js:158:40:158:61 | window. ... .search | tst.js:155:29:155:46 | xssSourceService() | | tst.js:177:9:177:41 | target | tst.js:180:28:180:33 | target | | tst.js:177:9:177:41 | target | tst.js:180:28:180:33 | target | | tst.js:177:18:177:34 | document.location | tst.js:177:18:177:41 | documen ... .search | | tst.js:177:18:177:34 | document.location | tst.js:177:18:177:41 | documen ... .search | | tst.js:177:18:177:41 | documen ... .search | tst.js:177:9:177:41 | target | | tst.js:184:9:184:42 | tainted | tst.js:186:31:186:37 | tainted | | tst.js:184:9:184:42 | tainted | tst.js:186:31:186:37 | tainted | | tst.js:184:9:184:42 | tainted | tst.js:188:42:188:48 | tainted | | tst.js:184:9:184:42 | tainted | tst.js:188:42:188:48 | tainted | | tst.js:184:9:184:42 | tainted | tst.js:189:33:189:39 | tainted | | tst.js:184:9:184:42 | tainted | tst.js:189:33:189:39 | tainted | | tst.js:184:9:184:42 | tainted | tst.js:191:54:191:60 | tainted | | tst.js:184:9:184:42 | tainted | tst.js:191:54:191:60 | tainted | | tst.js:184:9:184:42 | tainted | tst.js:192:45:192:51 | tainted | | tst.js:184:9:184:42 | tainted | tst.js:192:45:192:51 | tainted | | tst.js:184:9:184:42 | tainted | tst.js:193:49:193:55 | tainted | | tst.js:184:9:184:42 | tainted | tst.js:193:49:193:55 | tainted | | tst.js:184:19:184:35 | document.location | tst.js:184:19:184:42 | documen ... .search | | tst.js:184:19:184:35 | document.location | tst.js:184:19:184:42 | documen ... .search | | tst.js:184:19:184:42 | documen ... .search | tst.js:184:9:184:42 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:199:67:199:73 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:199:67:199:73 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:200:67:200:73 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:200:67:200:73 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:204:35:204:41 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:206:46:206:52 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:207:38:207:44 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:208:35:208:41 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:236:35:236:41 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:238:20:238:26 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:240:23:240:29 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:241:23:241:29 | tainted | | tst.js:197:9:197:42 | tainted | tst.js:255:23:255:29 | tainted | | tst.js:197:19:197:35 | document.location | tst.js:197:19:197:42 | documen ... .search | | tst.js:197:19:197:35 | document.location | tst.js:197:19:197:42 | documen ... .search | | tst.js:197:19:197:42 | documen ... .search | tst.js:197:9:197:42 | tainted | | tst.js:204:35:204:41 | tainted | tst.js:212:28:212:46 | this.state.tainted1 | | tst.js:204:35:204:41 | tainted | tst.js:212:28:212:46 | this.state.tainted1 | | tst.js:206:46:206:52 | tainted | tst.js:213:28:213:46 | this.state.tainted2 | | tst.js:206:46:206:52 | tainted | tst.js:213:28:213:46 | this.state.tainted2 | | tst.js:207:38:207:44 | tainted | tst.js:214:28:214:46 | this.state.tainted3 | | tst.js:207:38:207:44 | tainted | tst.js:214:28:214:46 | this.state.tainted3 | | tst.js:208:35:208:41 | tainted | tst.js:218:32:218:49 | prevState.tainted4 | | tst.js:208:35:208:41 | tainted | tst.js:218:32:218:49 | prevState.tainted4 | | tst.js:236:35:236:41 | tainted | tst.js:225:28:225:46 | this.props.tainted1 | | tst.js:236:35:236:41 | tainted | tst.js:225:28:225:46 | this.props.tainted1 | | tst.js:238:20:238:26 | tainted | tst.js:226:28:226:46 | this.props.tainted2 | | tst.js:238:20:238:26 | tainted | tst.js:226:28:226:46 | this.props.tainted2 | | tst.js:240:23:240:29 | tainted | tst.js:227:28:227:46 | this.props.tainted3 | | tst.js:240:23:240:29 | tainted | tst.js:227:28:227:46 | this.props.tainted3 | | tst.js:241:23:241:29 | tainted | tst.js:231:32:231:49 | prevProps.tainted4 | | tst.js:241:23:241:29 | tainted | tst.js:231:32:231:49 | prevProps.tainted4 | | tst.js:247:39:247:55 | props.propTainted | tst.js:251:60:251:82 | this.st ... Tainted | | tst.js:247:39:247:55 | props.propTainted | tst.js:251:60:251:82 | this.st ... Tainted | | tst.js:255:23:255:29 | tainted | tst.js:247:39:247:55 | props.propTainted | | tst.js:259:7:259:17 | window.name | tst.js:259:7:259:17 | window.name | | tst.js:260:7:260:10 | name | tst.js:260:7:260:10 | name | | tst.js:264:11:264:21 | window.name | tst.js:264:11:264:21 | window.name | | tst.js:280:22:280:29 | location | tst.js:280:22:280:29 | location | | tst.js:285:9:285:29 | tainted | tst.js:288:59:288:65 | tainted | | tst.js:285:9:285:29 | tainted | tst.js:288:59:288:65 | tainted | | tst.js:285:19:285:29 | window.name | tst.js:285:9:285:29 | tainted | | tst.js:285:19:285:29 | window.name | tst.js:285:9:285:29 | tainted | | tst.js:301:9:301:16 | location | tst.js:302:10:302:10 | e | | tst.js:301:9:301:16 | location | tst.js:302:10:302:10 | e | | tst.js:302:10:302:10 | e | tst.js:303:20:303:20 | e | | tst.js:302:10:302:10 | e | tst.js:303:20:303:20 | e | | tst.js:308:10:308:17 | location | tst.js:310:10:310:10 | e | | tst.js:308:10:308:17 | location | tst.js:310:10:310:10 | e | | tst.js:310:10:310:10 | e | tst.js:311:20:311:20 | e | | tst.js:310:10:310:10 | e | tst.js:311:20:311:20 | e | | tst.js:316:35:316:42 | location | tst.js:316:35:316:42 | location | | tst.js:327:18:327:34 | document.location | tst.js:332:18:332:35 | params.get('name') | | tst.js:327:18:327:34 | document.location | tst.js:332:18:332:35 | params.get('name') | | tst.js:327:18:327:34 | document.location | tst.js:332:18:332:35 | params.get('name') | | tst.js:327:18:327:34 | document.location | tst.js:332:18:332:35 | params.get('name') | | tst.js:341:20:341:36 | document.location | tst.js:343:5:343:30 | getUrl( ... ring(1) | | tst.js:341:20:341:36 | document.location | tst.js:343:5:343:30 | getUrl( ... ring(1) | | tst.js:341:20:341:36 | document.location | tst.js:343:5:343:30 | getUrl( ... ring(1) | | tst.js:341:20:341:36 | document.location | tst.js:343:5:343:30 | getUrl( ... ring(1) | | tst.js:348:7:348:39 | target | tst.js:349:12:349:17 | target | | tst.js:348:7:348:39 | target | tst.js:349:12:349:17 | target | | tst.js:348:16:348:32 | document.location | tst.js:348:16:348:39 | documen ... .search | | tst.js:348:16:348:32 | document.location | tst.js:348:16:348:39 | documen ... .search | | tst.js:348:16:348:39 | documen ... .search | tst.js:348:7:348:39 | target | | tst.js:355:10:355:42 | target | tst.js:356:16:356:21 | target | | tst.js:355:10:355:42 | target | tst.js:356:16:356:21 | target | | tst.js:355:10:355:42 | target | tst.js:360:21:360:26 | target | | tst.js:355:10:355:42 | target | tst.js:360:21:360:26 | target | | tst.js:355:10:355:42 | target | tst.js:363:18:363:23 | target | | tst.js:355:10:355:42 | target | tst.js:363:18:363:23 | target | | tst.js:355:19:355:35 | document.location | tst.js:355:19:355:42 | documen ... .search | | tst.js:355:19:355:35 | document.location | tst.js:355:19:355:42 | documen ... .search | | tst.js:355:19:355:42 | documen ... .search | tst.js:355:10:355:42 | target | | tst.js:371:7:371:39 | target | tst.js:374:18:374:23 | target | | tst.js:371:7:371:39 | target | tst.js:374:18:374:23 | target | | tst.js:371:16:371:32 | document.location | tst.js:371:16:371:39 | documen ... .search | | tst.js:371:16:371:32 | document.location | tst.js:371:16:371:39 | documen ... .search | | tst.js:371:16:371:39 | documen ... .search | tst.js:371:7:371:39 | target | | tst.js:381:7:381:39 | target | tst.js:384:18:384:23 | target | | tst.js:381:7:381:39 | target | tst.js:384:18:384:23 | target | | tst.js:381:7:381:39 | target | tst.js:386:18:386:23 | target | | tst.js:381:7:381:39 | target | tst.js:397:18:397:23 | target | | tst.js:381:7:381:39 | target | tst.js:406:18:406:23 | target | | tst.js:381:7:381:39 | target | tst.js:408:19:408:24 | target | | tst.js:381:16:381:32 | document.location | tst.js:381:16:381:39 | documen ... .search | | tst.js:381:16:381:32 | document.location | tst.js:381:16:381:39 | documen ... .search | | tst.js:381:16:381:39 | documen ... .search | tst.js:381:7:381:39 | target | | tst.js:386:18:386:23 | target | tst.js:386:18:386:29 | target.taint | | tst.js:386:18:386:23 | target | tst.js:386:18:386:29 | target.taint | | tst.js:391:19:391:35 | document.location | tst.js:391:19:391:42 | documen ... .search | | tst.js:391:19:391:35 | document.location | tst.js:391:19:391:42 | documen ... .search | | tst.js:391:19:391:42 | documen ... .search | tst.js:392:18:392:30 | target.taint3 | | tst.js:391:19:391:42 | documen ... .search | tst.js:392:18:392:30 | target.taint3 | | tst.js:397:18:397:23 | target | tst.js:397:18:397:30 | target.taint5 | | tst.js:397:18:397:23 | target | tst.js:397:18:397:30 | target.taint5 | | tst.js:406:18:406:23 | target | tst.js:406:18:406:30 | target.taint7 | | tst.js:406:18:406:23 | target | tst.js:406:18:406:30 | target.taint7 | | tst.js:408:19:408:24 | target | tst.js:408:19:408:31 | target.taint8 | | tst.js:408:19:408:31 | target.taint8 | tst.js:408:19:408:31 | target.taint8 | | tst.js:408:19:408:31 | target.taint8 | tst.js:409:18:409:30 | target.taint8 | | tst.js:408:19:408:31 | target.taint8 | tst.js:409:18:409:30 | target.taint8 | | tst.js:416:7:416:46 | payload | tst.js:417:18:417:24 | payload | | tst.js:416:7:416:46 | payload | tst.js:417:18:417:24 | payload | | tst.js:416:17:416:31 | window.location | tst.js:416:17:416:46 | window. ... bstr(1) | | tst.js:416:17:416:31 | window.location | tst.js:416:17:416:46 | window. ... bstr(1) | | tst.js:416:17:416:46 | window. ... bstr(1) | tst.js:416:7:416:46 | payload | | tst.js:419:7:419:55 | match | tst.js:421:20:421:24 | match | | tst.js:419:15:419:29 | window.location | tst.js:419:15:419:55 | window. ... (\\w+)/) | | tst.js:419:15:419:29 | window.location | tst.js:419:15:419:55 | window. ... (\\w+)/) | | tst.js:419:15:419:55 | window. ... (\\w+)/) | tst.js:419:7:419:55 | match | | tst.js:421:20:421:24 | match | tst.js:421:20:421:27 | match[1] | | tst.js:421:20:421:24 | match | tst.js:421:20:421:27 | match[1] | | tst.js:424:18:424:32 | window.location | tst.js:424:18:424:51 | window. ... '#')[1] | | tst.js:424:18:424:32 | window.location | tst.js:424:18:424:51 | window. ... '#')[1] | | tst.js:424:18:424:32 | window.location | tst.js:424:18:424:51 | window. ... '#')[1] | | tst.js:424:18:424:32 | window.location | tst.js:424:18:424:51 | window. ... '#')[1] | | typeahead.js:9:28:9:30 | loc | typeahead.js:10:16:10:18 | loc | | typeahead.js:9:28:9:30 | loc | typeahead.js:10:16:10:18 | loc | | typeahead.js:9:28:9:30 | loc | typeahead.js:10:16:10:18 | loc | | typeahead.js:9:28:9:30 | loc | typeahead.js:10:16:10:18 | loc | | typeahead.js:20:13:20:45 | target | typeahead.js:21:12:21:17 | target | | typeahead.js:20:22:20:38 | document.location | typeahead.js:20:22:20:45 | documen ... .search | | typeahead.js:20:22:20:38 | document.location | typeahead.js:20:22:20:45 | documen ... .search | | typeahead.js:20:22:20:45 | documen ... .search | typeahead.js:20:13:20:45 | target | | typeahead.js:21:12:21:17 | target | typeahead.js:24:30:24:32 | val | | typeahead.js:24:30:24:32 | val | typeahead.js:25:18:25:20 | val | | typeahead.js:24:30:24:32 | val | typeahead.js:25:18:25:20 | val | | v-html.vue:6:42:6:58 | document.location | v-html.vue:2:8:2:23 | v-html=tainted | | v-html.vue:6:42:6:58 | document.location | v-html.vue:2:8:2:23 | v-html=tainted | | v-html.vue:6:42:6:58 | document.location | v-html.vue:2:8:2:23 | v-html=tainted | | v-html.vue:6:42:6:58 | document.location | v-html.vue:2:8:2:23 | v-html=tainted | | winjs.js:2:7:2:53 | tainted | winjs.js:3:43:3:49 | tainted | | winjs.js:2:7:2:53 | tainted | winjs.js:3:43:3:49 | tainted | | winjs.js:2:7:2:53 | tainted | winjs.js:4:43:4:49 | tainted | | winjs.js:2:7:2:53 | tainted | winjs.js:4:43:4:49 | tainted | | winjs.js:2:17:2:33 | document.location | winjs.js:2:17:2:40 | documen ... .search | | winjs.js:2:17:2:33 | document.location | winjs.js:2:17:2:40 | documen ... .search | | winjs.js:2:17:2:40 | documen ... .search | winjs.js:2:17:2:53 | documen ... ring(1) | | winjs.js:2:17:2:53 | documen ... ring(1) | winjs.js:2:7:2:53 | tainted | #select | typeahead.js:10:16:10:18 | loc | typeahead.js:9:28:9:30 | loc | typeahead.js:10:16:10:18 | loc | Cross-site scripting vulnerability due to $@. | typeahead.js:9:28:9:30 | loc | user-provided value |